تماس با ما

Have you noticed how popular sites like Facebook and Google are now giving you the ability to add two-factor authentication to improve security? Well now you can add two-factor authentication to your WordPress site. This ensures maximum security for your WordPress site. In this article, we will show you how to add two-factor authentication for WordPress using both Google Authenticator as well as SMS text message.

Why Add Two-Factor Authentication for WordPress Login?

One of the most common tricks hackers use is called brute force attacks. By using automated scripts, hackers try to guess username and password to break into a WordPress site.

If they steal your password or accurately guess it, then they can infect your website with malware.

One of the easiest ways to protect your WordPress website against stolen password is to add two-factor authentication. This way even if someone stole your password, they will need to enter a security code from your phone to gain access.

Google Authenticator App – Fallback option where you receive the verification code in an app.

Let’s take a look at how to easily add two-factor verification to your WordPress login screen for free.

Adding 2-Step SMS Verification to WordPress Login Screen

This method adds a 2-Step SMS verification to your WordPress login screen. After entering the WordPress username and password, you will receive a text message via SMS on your phone with a code.

First you will need to install the Two Factor and Two Factor SMS plugins. For more details, see our step by step guide on how to install a WordPress plugin.

The first plugin which is called Two Factor provides multiple ways to set up 2-step verification in WordPress. The second plugin, which is called Two Factor SMS is an addon for the first plugin. It adds support for 2-Step SMS verification. You will need both these plugins installed and activated.

Upon activation, you need to head over to Users » Your Profile page and scroll down to Two Factor Options section.

Check the box next to ‘SMS (Twilio)’ option and also click the radio button to make it your primary verification method.

After that scroll down to the Twilio section.

You will be asked to provide your Twilio account information.

Twilio is an online service that offers phone, voice messaging, and SMS services to use with your own applications. They also have a limited free plan which would be sufficient for our purpose here.

Head over to Twilio website and create your free account.

On the signup page, you will be asked for the usual personal information. After that you will be asked which products you would like to use first.

You need to select SMS and then select 2-factor authentication for ‘What you are building’ option. Finally select PHP for your programming language.

Once you have signed up for an account, you will reach your Twilio dashboard where you need to click on the get started button.

This will take you to a settings wizard where you need to click on the ‘Get your first Twilio number’ button.

It will bring up a popup showing a US based phone number. Copy and save this number in a text file and then click on the ‘Choose this number’ button.

You can now exit the wizard and head over to Settings » Geo Permissions page.

Here you need to select the countries where you will be sending SMS. Since you are using the service to receive SMS for yourself, you can select the country you live in and countries you travel to.